Pm7500-00 Firmware vulnerabilities

3 known vulnerabilities in Pm7500-00 Firmware from Zyxel. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EX3301-T0 firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-13943Feb 24, 2026ZyxelEPSS 1.54%

  A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

• 8.8 High severity

  DX3300-T0 firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-8693Nov 18, 2025ZyxelEPSS 1.05%

  A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

• 7.5 High severity

  DX3301-T0 firmware: Uncontrolled Resource Consumption

  CVE-2025-6599Nov 18, 2025Zyxel

  An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks. Such attacks may temporarily block legitim